CVE-2021-33553 UDP Technology/Geutebrück camera devices: Command injection in command parameter leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33553

CVE-2021-33553 corresponds to a command-injection vulnerability in UDP Technology firmware used by Geutebrück IP cameras (e.g., G-Cam E2 and G-Code EN/EC series). The flaw allows remote arbitrary code execution via manipulated parameters in authenticated contexts. Affected products include UDP Te...

CVE-2021-33552

CVE-2021-33552 affects Geutebrück UDP Technology-based IP cameras and G-Cam/E2, G-Code encoders with firmware versions 1.12.0.27, 1.12.13.2, 1.12.14.5 (and related EBC/EFD/ETHC/EWPC/EEC/EN variants). Root cause is command injection in the date parameter that can lead to remote arbitrary code exec...

CVE-2021-33552 UDP Technology/Geutebrück camera devices: Command injection in date parameter leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33551 UDP Technology/Geutebrück camera devices: Command injection in environment.lang parameter leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33551

CVE-2021-33551 affects Geutebrück UDP Technology-powered IP cameras (G-Cam E2 family and G-Code) where an environment.lang parameter vulnerability enables command injection leading to remote code execution. Affected firmware includes versions 1.12.0.27 and earlier, 1.12.13.2, and 1.12.14.5. Publi...

CVE-2021-33550 UDP Technology/Geutebrück camera devices: Command injection in date parameter leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33549 UDP Technology/Geutebrück camera devices: Buffer overflow in action parameter leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the action parameter, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33548

CVE-2021-33548 affects Geutebrück UDP Technology firmware used in Geutebrück G-Cam E2xx and G-Code EEC-2xx devices (and related EBC/EFD/ETHC/EWPC/EEN series). The issue is a command-injection vulnerability in multiple camera devices that can be triggered via crafted input, enabling remote code ex...

CVE-2021-33548 UDP Technology/Geutebrück camera devices: Command injection in preserve parameter leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33547 UDP Technology/Geutebrück camera devices: Buffer overflow in profile parameter leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the profile parameter which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33546

CVE-2021-33546 is a stack-based buffer overflow in the name parameter that enables remote code execution on UDP Technology firmware used in Geutebrück IP cameras. Affected products per sources include Geutebrück G-Cam E2 (G-CAM) and G-Code encoders with specific firmwares: G-CAM versions 1.12.0.2...

CVE-2021-33546 UDP Technology/Geutebrück camera devices: Buffer overflow in name parameter leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the name parameter, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33545

CVE-2021-33545 affects Geutebrück UDP Technology-based IP cameras/encoders (G-Cam E2 series and G-Code encoder) with older Geutebrück firmware. The vulnerability is a stack-based buffer overflow in the counter parameter that can allow an unauthenticated attacker to remotely execute arbitrary code...

CVE-2021-33545 UDP Technology/Geutebrück camera devices: Buffer overflow in counter parameter leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the counter parameter which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33544 UDP Technology/Geutebrück camera devices: command injection leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33544

CVE-2021-33544 affects Geutebrück UDP Technology IP cameras (G-Cam E2 and G-Code encoders) with affected UDP firmware (e.g., E2: 1.12.0.27 and earlier; 1.12.13.2; 1.12.14.5; G-Code: same). The issue is a command-injection vulnerability in the web-based management interface that enables remote arb...

CVE-2021-33543 UDP Technology/Geutebrück camera devices: Authentication Bypass

Multiple camera devices by UDP Technology, Geutebrück and other vendors allow unauthenticated remote access to sensitive files due to default user authentication settings. This can lead to manipulation of the device and denial of service...

PT-2021-20199 · Geutebrück · Camera Devices

Name of the Vulnerable Software and Affected Versions: Camera devices by UDP Technology, Geutebrück and other vendors affected versions not specified Description: The issue concerns command injection, which may allow an attacker to remotely execute arbitrary code on multiple camera devices...

PT-2021-20190 · Geutebrück +1 · Geutebrück Camera Devices +1

Name of the Vulnerable Software and Affected Versions: UDP Technology camera devices affected versions not specified Geutebrück camera devices affected versions not specified Description: The issue allows unauthenticated remote access to sensitive files due to default user authentication settings...